open source static code analysis tools